Open Closed

External Provider API is exposing key value #2743

User avatar
0
shobhit created
  • ABP Framework version: v4.2.2
  • UI type: Angular
  • DB provider: EF Core
  • Tiered (MVC) or Identity Server Separated (Angular): yes
  • Exception message and stack trace:
  • Steps to reproduce the issue:"
  1. access api url: https://myapi.com/api/account/external-provider/by-name?Name=<provider> like Google
  2. user can get all details about external provider configuration
  3. this is not secured
Go to accepted answer
1 Answer(s)
  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    user can get all details about external provider configuration

    these are public info not including the secrets.

Assignee
User avatar maliming
Labels
None yet
Made with ❤️ on ABP v9.1.0-preview. Updated on November 01, 2024, 05:35